21072026_0849_Amiantit_RFQ_Documents-BOQ.lnk.zip
- SHA256 3ece0349ff1491f40f197bb85a516753e7922fc9a72b6705f2da78e961f7dbed
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Amiantit_RFQ_Documents/BOQ.lnk
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
Amiantit_RFQ_Documents/BOQ.lnk
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
Amiantit_RFQ_Documents/DRAWINGS.js
Resource
win10v2004-20260513-en
windows10-2004-x64
35 signatures
300 seconds
Behavioral task
behavioral4
Sample
Amiantit_RFQ_Documents/DRAWINGS.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
30 signatures
300 seconds
Behavioral task
behavioral5
Sample
Amiantit_RFQ_Documents/SPECIFICATIONS/Amiantit_Request_For_Quotation_for_Ongoing_Project_with_El_Sewedy_Co_in_Rabigh_GV.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
Amiantit_RFQ_Documents/SPECIFICATIONS/Amiantit_Request_For_Quotation_for_Ongoing_Project_with_El_Sewedy_Co_in_Rabigh_GV.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target 21072026_0849_Amiantit_RFQ_Documents-BOQ.lnk.zip
- Size 3.2MB
- Sample260721-kq2pksbs8l
- SHA256 3ece0349ff1491f40f197bb85a516753e7922fc9a72b6705f2da78e961f7dbed
- MD5 607330487df1d91dbdc3c25ba86fece3
- SHA1 e78a5f03973d9a4dcbf23999b9ffa897041a2053
- SHA512 70cbd72a429444e11458ee30b8ada06839d1d0a6ed849fa8f595abd387b521c2e6fdda8e171e1ffb4b70cf46c5e9fe17e9d4b7190a41509895c441705edb653e
- SSDEEP 98304:GJYJnORtD/Of3tvK3eNnUa8nBwOO5Ry0UH3Se4bSN:GJYJnGtDOf3ZK3e+0r5kNXSPc
- TLSH T12CF53386243CC358CB55C19E5F3B96708D1E90CE86CF899AAB0D72A6FADF419043C7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Amiantit_RFQ_Documents/SPECIFICATIONS/Amiantit_Request_For_Quotation_for_Ongoing_Project_with_El_Sewedy_Co_in_Rabigh_GV.exe
File Explorer
-
21072026_0849_Amiantit_RFQ_Documents-BOQ.lnk.zip.zip 3.2MB
-
Amiantit_RFQ_Documents/BOQ.lnk.lnk 1KB
-
Amiantit_RFQ_Documents/DRAWINGS.JS.js 4.5MB
-
Amiantit_RFQ_Documents/SPECIFICATIONS/Amiantit_Request_For_Quotation_for_Ongoing_Project_with_El_Sewedy_Co_in_Rabigh_GV.exe.exe 499KB
-
Amiantit_RFQ_Documents/SPECIFICATIONS/YWEYHNYQDMVPCNUQ.css857KB
Amiantit_RFQ_Documents/BOQ.lnk
- SHA256 5fb44b1f830a3c21b2e12287d79a79d60f9dfd3ad33c5a94e946078548a10c1d
- MD5 af9953deeb925554d524f2f262efe9bf
- SHA1 c82850341b6ee6ff80544d791c7439aa50b948d1
- SHA512 2ccb891467f0de144c0801df4d4860c3ae558e93002fd80c0f2a2a688925e167d1646b132185ed9bc845fc1a2897bd68c7ad04871fa981dee41f1ad09c096dbd
- TLSH T1E73135015AFF4974F3F2AF71C7745208C526FDE91A06DB8E4460110E0850F088936B33
- MD5 SHA1 SHA512 TLSH
Amiantit_RFQ_Documents/DRAWINGS.JS
- SHA256 8959481382543edd72ccf80ebde2249ea0fc79c44a52a95fd1be6b19135174b3
- MD5 5e6d2b4e607032cdc9b18b97ab9ebfb6
- SHA1 e35e8d1e2647bc0096bfb4f4cba08445844869a9
- SHA512 d2435f88d5cbd8028e235d19bebae46ef67c3ab66713c4e3c796c16989dd21547737dd7c77183083d38fbd104b89f203932de8d56722e52d5c203ca1413c12c5
- SSDEEP 98304:Kep4h2VXOAaJWpPezjwop7HVvHX5Jm0MpaSMvTE9mk2DKU04xgys9w11XMjpaeOo:n6qgJWpej/tH9360PSMvo9l2DBZgys4G
- TLSH T12C269D449E279E431058C3FCD105EFEEC5BE910B3624CE497A4E4DB8982DF197A693A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Amiantit_RFQ_Documents/SPECIFICATIONS/Amiantit_Request_For_Quotation_for_Ongoing_Project_with_El_Sewedy_Co_in_Rabigh_GV.exe
- IMPHASH 1bcc165c8b58d3d1de85dfdf8510879a
- SHA256 d447a06cba8d3dbe80e09d73dd64576836b258961ee0d3ba56cf26cea7962b49
- MD5 7675b38aabebc8427171447edd484b5b
- SHA1 145c72f8acdcd366869f955dffd000d3bc146b6e
- SHA512 bc9bddbee59f165742a3203f9e2ba9de409e66de6334cb352cded84cce3e1074dbd0ac17b29e58c8729906848b64d1486fb8c848ca15422127b2baeb4c5e5dbe
- SSDEEP 12288:HW7YOPcqPqvopYJNWGIbK8AJYlqWuSr7B/Uj:HW7RPcqPqvopYJYK8AyldpUj
- TLSH T176B43AC4BACB08F1E2A355B0C49BDB7F96349A050022D5BAFF5CBD59EC33746092725A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
5344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CreateThread
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
QueryPerformanceCounter
RaiseException
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
msvcrt
__DestructExceptionObject
__dllonexit
__doserrno
__getmainargs
__initenv
__lconv_init
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_filelengthi64
_fileno
_fmode
_initterm
_iob
_isatty
_lock
_lseeki64
_onexit
_pclose
_popen
_unlock
_write
acos
abort
asin
atan
calloc
clearerr
clock
cosh
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fscanf
fsetpos
fwrite
getc
getenv
gmtime
localtime
log10
malloc
memchr
memcmp
memmove
memset
mktime
memcpy
putc
putchar
remove
rename
setlocale
setvbuf
signal
sinh
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtoul
system
time
tan
tanh
tmpfile
tmpnam
ungetc
vfprintf
Name
.text
Size
387KB
Virtual Size
387KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Amiantit_RFQ_Documents/SPECIFICATIONS/YWEYHNYQDMVPCNUQ.css
- SHA256 b28d3f7796fad0522451cb6ca8330ac4b57d99912d09b65493d5aab84291eac9
- MD5 8f29a6f8c3802206b5f1773c050895ea
- SHA1 c4c2ab4ad3be56bbe42eae282bdd67601a4b18ce
- SHA512 ea208160c57ad307bb86fed2467a64ce31b1a3d678673f2e487f29a3b9bbcd30010f80ecd57d08e358fc2a18bcddfd0d599ba5529d17f94fb5f653a0cae25506
- SSDEEP 12288:RuddVdLVaYAc6vvqv1QoJahqpdwXWcNGqu18H/VmMxiasfx71lNgaqyvQsKyPZze:Go8xJsqsXWcEqu6HdmMx/sfv4tqQlVo0
- TLSH T1BE15D18BB9CA18E455B682F0CCA75ECF70F5E8ED074D17864F68C05666207BCC9EC929
- MD5 SHA1 SHA512 SSDEEP TLSH